Amendments to the Claims 



Kindly amend claims 1, 3, 8, 9 & 20, and cancel claim 2 (without prejudice), as set forth 
below. All pending claims are reproduced below, with changes in the amended claims shown by 
underline (for added matter) and strikethrough/double brackets (for deleted matter). 



1 . (Currently Amended) A computer-implemented method comprising: 

securely managing an arbitrary number of data files in non-volatile storage 
in order to restore data after abortion of a write operation, the data being stored in 
a record oriented data structure with each of the records containing, in addition to 
data contents, a first reference indicating the current data-containing record of a 
previous file, and a second reference indicating the current data-containing record 
of a subsequent file, the securely managing comprising: 

performing a wh e r e in the write operation comprising compris e s an 
update stage and an atomic write stage, the performing comprising: 

performing the update stag e comprising multiple update 
operations p e rformed for a plurality of records employing the 
second references of at lea s t som e r e cords of the plurality of 
records, wherein each file affected by the write operation 
comprises a plurality of records, and for each record thereof 
affected by the write operation, one of said records in each file 
contains existing data prior to said multiple update operations and 
another of said records contains corresponding data as modified 
according to said multiple update operations, each of said records 
also comprising a record-status data element indicative of the 
status of the data contained therein; and 

accepting the multiple updates to the plurality of records 
and wherein the updates to the plurality of r e cords ar e acc e pted in 
one atomic write stage after completion of the multiple update 
operations, the one atomic write stage employing the first 
references and the record-status data elements of th e at l e ast some 
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records of the plurality of records, and wherein at all times during 
the write operation, for each record of a file all of the data fil e s 
affected by the write operation , the file contains existing contain 
e ith e r all of th e data stored prior to the write operation in one 
record , or all of th e and corresponding data as modified subs e qu e nt 
te by the write operation in another record . 

2. (Previously Canceled). 

3. (Currently Amended) The computer-implemented method as claimed in claim 
[[2]] I, wherein said data prior to the write operation, in each file, is retained as the active data in 
the case of a power failure, until all files have been successfully updated according to said write 
operation. 

4. (Previously Presented) The computer-implemented method as claimed in claim 1, 
wherein each record contains a synchronization byte, indicating a relationship with records of 
other files. 

5. (Previously Presented) The computer-implemented method as claimed in claim 3, 
wherein each record contains a synchronization byte, indicating a relationship with records of 
other files. 

6. (Previously Presented) The computer-implemented method as claimed in claim 5, 
wherein the first reference of each record comprises a first pointer (PTR 1) indicating the current 
data-containing record of a previous file and the second reference of each record comprises a 
further pointer (PTR 3) indicating the current data-containing record of a subsequent file. 

7. (Previously Presented) The computer-implemented method as claimed in claim 6, 
wherein a third reference of each record comprises a second pointer (PTR 2) indicating the 
current data-containing record of that file. 
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8. (Currently Amended) A computer-implemented method comprising: 

securely managing EEPROM data files in order to restore data after 
abortion of a write operation, the data being stored in the files in a record-oriented 
data structure, such that the data in all files affected by the write operation is 
consistent with respect to completion of the write operation, and wherein 
information concerning the status and location of the consistent data is stored in 
the record oriented data structure together with the data, wherein each record of 
the record oriented data structure of the files comprises, in addition to data 
contents, a first reference indicating the current data-containing record of a 
previous file, and a second reference indicating the current data-containing record 
of a subsequent file, the securely managing comprising: 

performing a wh e rein th e write operation comprising comprises an 
update stage and an atomic write stage, the performing comprising: 

performing the updat e stag e comprising multiple update 
operations p e rform e d for a plurality of records employing the 
second references of at l e ast som e r e cords of the plurality of 
records, wherein each file affected by the write operation 
comprises a plurality of records, and for each record thereof 
affected by the write operation, one of said records of the file 
contains existing data prior to said multiple update operations and 
another of said records contains corresponding data as modified 
according to said multiple update operations, each of said records 
also comprising a record-status data element indicative of the 
status of the data contained therein; and 

accepting the multiple updates to the plurality of records 
and wherein the atomic write stage is performed upon completion 
of the multiple update operations and employs the first references 
and the record-status data elements of the at least some r e cords of 
the plurality of records. 
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9. (Currently Amended) The computer-implemented method according to claim 8, 
wherein two or more data files are affected by said write operation, and wherein new or modified 
data is written into said files in a cyclic manner, wherein each file comprises an indication of the 
number of records contained in said file and a plurality of records, and wherein each record 
further comprises an indication of th e status of th e data in said r e cord, and a synchronisation 
number synchronising with records of other files. 

1 0. (Previously Presented) The computer-implemented method according to claim 9, 
further comprising determining a current active record of a first of said files, and a working 
record of said first file; setting the synchronization number of the working record of said file to 
the synchronization number of the current active record; copying the data stored in said current 
active record into said working record and adding to or modifying said data according to said 
write operation, in said working record; changing the status of said working record of said file to 
'active'; repeating said steps for each further file; and changing the record status of said original 
current active record of said first file to 'inactive' as an indication that said write operation is 
complete. 

1 1 . (Previously Presented) The computer-implemented method as claimed in claim 

10, wherein said step of determining the current active record and the working record of said 
files comprises searching for the first record in said file whose status byte indicates 'active' status 
and setting this record as said current active record, and setting the subsequent record as said 
working record. 

12. (Previously Presented) The computer-implemented method as claimed in claim 

11, comprising: 

adding to or modifying the data of a record in the first file by: 

identifying the current active record of said file and a working record and 
copying the data to be added to or modified from the current active record to the 
working record; 
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modifying the data in said working record in accordance with the write 
operation; wherein the status byte of said current active record indicates that that 
record is 'fully active' and the status of said working record indicates that that 
record is 'inactive'; 

setting synchronization indicator pointers to indicate that said file is said 
first file and to indicate that no further files have been modified; 

identifying a current active record and a working record of a second file 
and copying the data from the current active record to the working record; 
modifying the data in the working record according to said write operation, 
wherein the status byte of said active current record indicates that the data in this 
record is "fully active" and the status byte of the working record indicates that this 
record is 'inactive'; 

setting synchronization indicator pointers to indicate the link between this 
file and said first file, and changing said synchronization indicator pointer of said 
first file to indicate its link with said second file; and 

repeating these steps for said second file for any subsequent files, wherein 

for the last file affected by said write operation, after setting said 
synchronization indicator pointers, determining that this is the last file, setting an 
indication pointer to indicate that no subsequent files are affected by said writing 
operation; and 

setting the status byte of each of said working records of said affected files 
to a 'fully active' state, whereupon the write operation is complete and the 
modified data is the active data in all files. 

13. (Previously Presented) The computer-implemented method as claimed in claim 
12, wherein, upon interruption of said write operation at any stage, either all current active 
records of all files affected by said operation are set as 'fully active' records, and the data 
contained in said files prior to the start of said write operation is the current active data, or all 
working records of all files are set to a 'fully active' status, in which case all files contain the 
modified data due to said write operation as said active data. 
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1 4. (Previously Presented) The computer-implemented method as claimed in claim 
13, wherein interruption of said write operation during or immediately after the step of 
modifying the data in the working record of said first file results in the current active record of 
said first file remaining as the 'fully active' data record, at which time no further files have been 
modified and all of the 'active' datable files correspond to the data prior to the write operation. 

15. (Previously Presented) The computer-implemented method as claimed in claim 
13, wherein an interruption of said write operation during or subsequent to the setting of the 
synchronization indicator pointers in said first file results in the current active record of said first 
file remaining as the 'fully active' data record, at which time no further files have been modified 
and all of the 'active' datable files correspond to the data prior to the write operation. 

16. (Previously Presented) The computer-implemented method as claimed in claim 
13, wherein an interruption of said write operation during or immediately after the step of 
modifying the data in the second or subsequent files results in the current active record of said 
second or subsequent file remaining set as said 'fully active' record, and, since said 
synchronization indicator pointer of said first file still indicates that said current active record is 
still said 'fully active' record of said first file, the currently active data of both or all of said files 
remains as that prior to the start of the write operation. 

1 7. (Previously Presented) The computer-implemented method as claimed in claim 
13, wherein an interruption to said write process during or immediately after modifying the data 
in the working record of the last file affected by said write operation, results in all of the current 
active records of all of said files being retained as said fully active records, wherein the currently 
active data corresponds to the data prior to the write operation. 

1 8. (Previously Presented) The computer-implemented method as claimed in claim 
13, wherein an interruption of said write process during or immediately after modification of the 
data in the working record of the last file affected by said write operation, causes all working 
records of all of said files to become set to 'fully active' records, such that all files contain data 
modified as a result of said write operation as the currently active data. 
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19. (Previously Presented) The computer-implemented method as claimed in claim 
12, wherein, when all of said write steps have been successfully completed, without an 
interruption, said synchronization indicator pointers are used to indicate the links between the 
modified records of the files affected, and all working records are set to status 'fully active' and 
said current active records are set to status 'inactive'. 

20. (Currently Amended) A system for securely managing EEPROM data files so 
that the data can be restored after abortion of the write operation to said data files, the system 
comprising: 

an EEPROM, and means for writing data to said EEPROM, said 
EEPROM comprising a number of data files, each data file comprising a plurality 
of records in a record oriented data structure, wherein each record of the record 
oriented data structure of the data files comprises, in addition to data content, a 
first reference indicating the current data-containing record of a previous file, and 
a second reference indicating the current data-containing record of a subsequent 
file, wh e r e in the means for writing, which write operation comprises an update 
stage and an atomic write stage, comprising: 

means for performing th e update stage comprising multiple update 
operations p e rformed for a plurality of records employing the second 
references of the plurality of records, wherein each file affected by the 
write operation comprises a plurality of records, and for each record 
thereof affected by the write operation, one of said records in each file 
contains existing data prior to said multiple update operations and another 
of said records contains corresponding data as modified according to said 
multiple update operations, each of said records also comprising a record- 
status data element indicative of the status of the data contained therein: 
and 

means for accepting the multiple updates to the plurality of records 
and wherein the atomic write stage is performed upon completion of the 
multiple update operations and employs the first references and the record- 
status data elements of th e at least som e records of the plurality of records. 
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21-25. (Previously Canceled). 



26. (Withdrawn) A computer-implemented method for ensuring the consistency of 
data stored in records in different files, the records being changed by a transaction, each change 
to a record of a file leading to the generation of new records in the files affected by the 
transaction, the method comprising: 

a) designating one of the files affected by the transaction as a primary 
file, only the primary file having a status concerning the successful execution of 
the transaction, the status assuming the value "current" or "not current"; 

b) setting the status to "current" in each newly generated primary 
record in the primary file; 

c) testing whether the primary file contains multiple primary records 
having the "current" status; 

d) resetting the status of the primary record of the primary file 
preceding the newly generated primary record to "not current", and retaining the 
"current" status of the newly generated primary record, if the write operation for a 
record of the files affected by the transaction is determined not to have terminated 
prematurely and resetting the status of the newly generated primary record to "not 
current", and retaining the "current" status of the preceding primary record of the 
primary file, if the write operation for a record of the files affected by the 
transaction is determined to have terminated prematurely. 

27. (Withdrawn) The computer-implemented method of claim 26, wherein each 
primary record of the primary file contains data for identifying records in files affected by the 
transaction. 

28. (Withdrawn) The computer-implemented method of claim 27, wherein the 
records of the primary file and the records of the files affected by the transaction are linked by a 
pointer. 
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